Malware Analysis

Malware Analysis – evasion – c2785bd19266c528af475aa0643f01ce

October 19, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: c2785bd19266c528af475aa0643f01ceSHA1: ecb4d80af70b2d12c1a5b711bc061fee04ef7d04ANALYSIS DATE: 2022-10-18T21:30:40ZTTPS: T1012, T1120, T1082, T1112, T1004, T1158, T1088, T1089,...

Malware Analysis – ransomware – bf26f02752e2eec7e9630ef53ed3543d

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: bf26f02752e2eec7e9630ef53ed3543dSHA1: 26dd87c544173fb9408d020234d6a6e7df3426a9ANALYSIS DATE: 2022-10-18T21:40:25ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – bootkit – c4f6b7208dd86c37e3e914e1355ee128

October 19, 2022

Score: 8 MALWARE FAMILY: bootkitTAGS:bootkit, discovery, exploit, persistence, spyware, stealerMD5: c4f6b7208dd86c37e3e914e1355ee128SHA1: 2d6243373836f27a2f90ede02bd1b18c5a72c970ANALYSIS DATE: 2022-10-18T22:20:19ZTTPS: T1222, T1112, T1158, T1012, T1082, T1005,...

Malware Analysis – ransomware – 1e3e08ed56fc7913137cfc1b95b68cb6

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 1e3e08ed56fc7913137cfc1b95b68cb6SHA1: 91d56e169d95011769bc4a54dc2f11c4b2115695ANALYSIS DATE: 2022-10-18T22:40:20ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – djvu – 49d0997396c539711ae1efd04ca5902c

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 49d0997396c539711ae1efd04ca5902cSHA1: 886058fb1c0815c20904da65a468a744123e57d8ANALYSIS DATE: 2022-10-18T22:40:06ZTTPS: T1222, T1082, T1005, T1081,...

Malware Analysis – ransomware – e625462dcf0586d7afda19827cb271ca

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: e625462dcf0586d7afda19827cb271caSHA1: 28d956d96c44bab58cd982017214232244189debANALYSIS DATE: 2022-10-18T22:40:35ZTTPS: T1091, T1005, T1081, T1082, T1107, T1490 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 9dcaa6c847abc868a2d6dead91dd6319

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 9dcaa6c847abc868a2d6dead91dd6319SHA1: b62464ed15f9a7d5a82119e301a8bebd5fe47ddcANALYSIS DATE: 2022-10-18T22:40:27ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 6d61871e22b3872ad2ac7d21e3a56299

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 6d61871e22b3872ad2ac7d21e3a56299SHA1: 7f0830eb80753d32e8a90a1e0d0d42d0b6866240ANALYSIS DATE: 2022-10-18T22:40:57ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 5e65904195205ca9bedca1ed62c18f0c

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 5e65904195205ca9bedca1ed62c18f0cSHA1: 64d15c171deada754b32fe25812b1c97cc0a0396ANALYSIS DATE: 2022-10-18T22:40:50ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – e8761eb93c7e5989e50da329c4f38aed

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: e8761eb93c7e5989e50da329c4f38aedSHA1: 9a2629958472845d2c67757a7cb6aaa445b1a874ANALYSIS DATE: 2022-10-18T22:41:01ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – e0a1dea78f5ef86ec2d274e7e9bcb5c7

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: e0a1dea78f5ef86ec2d274e7e9bcb5c7SHA1: 5f62d188f5eb3038b36007b1b72b20f6b5d24cafANALYSIS DATE: 2022-10-18T22:40:42ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – wannacry – 8053c8e9171fa8fa75061b6639531671

October 19, 2022

Score: 10 MALWARE FAMILY: wannacryTAGS:family:wannacry, discovery, ransomware, wormMD5: 8053c8e9171fa8fa75061b6639531671SHA1: 25975c73b62751e4defcecb23e1df90627c5360eANALYSIS DATE: 2022-10-18T22:41:12ZTTPS: T1046 ScoreMeaningExample10Known badA malware family was detected.8-9Likely maliciousOne...

Malware Analysis – djvu – 816added67b8695ce1d08dc8d64224f9

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: 816added67b8695ce1d08dc8d64224f9SHA1: 500c1d0c0dca3eb8e5a090e942136b140850567eANALYSIS DATE: 2022-10-18T22:54:22ZTTPS: T1012, T1082, T1222, T1053,...

Malware Analysis – djvu – adef9b3445ea954ca3ec8a1f61daef01

October 19, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, backdoor, collection, discovery, persistence, ransomware, trojanMD5: adef9b3445ea954ca3ec8a1f61daef01SHA1: e4805b0e226fe27413f14679b04aefa5a701ef6fANALYSIS DATE: 2022-10-18T22:42:17ZTTPS: T1082, T1114, T1060, T1112,...

Malware Analysis – ransomware – deba4c78231b0c065ff368ad213a1d4c

October 19, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: deba4c78231b0c065ff368ad213a1d4cSHA1: c56bfd5cc3437c381900bcd6b424130bd4454660ANALYSIS DATE: 2022-10-18T22:41:04ZTTPS: T1082, T1107, T1490, T1091, T1005, T1081 ScoreMeaningExample10Known badA malware...

Malware Analysis – persistence – f558d2ee7175b0ace3d68b9363a22f94

October 18, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistenceMD5: f558d2ee7175b0ace3d68b9363a22f94SHA1: 6e530c9a3eddabc29c2f8f6aca6c6f786ae052d6ANALYSIS DATE: 2022-10-18T14:10:50ZTTPS: T1012, T1120, T1082, T1060, T1112, T1018 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – evasion – a9692ba095ce225bfac0bb72c8617cab

October 18, 2022

Score: 10 MALWARE FAMILY: evasionTAGS:evasion, persistence, ransomware, trojanMD5: a9692ba095ce225bfac0bb72c8617cabSHA1: 14731f119cdbeab86a3cdbef53dfadf345b97288ANALYSIS DATE: 2022-10-18T14:00:14ZTTPS: T1491, T1112, T1490, T1088, T1089, T1158, T1018, T1012,...

Malware Analysis – persistence – f5e72bf445387eddec000e0238adf873

October 18, 2022

Score: 8 MALWARE FAMILY: persistenceTAGS:persistenceMD5: f5e72bf445387eddec000e0238adf873SHA1: 895eb3047e7a28ce219fdd7e7ad5ce2a61312d93ANALYSIS DATE: 2022-10-18T14:13:51ZTTPS: T1060, T1112, T1082, T1018, T1012, T1120 ScoreMeaningExample10Known badA malware family was...

Malware Analysis – persistence – 6a1836250717296a9b354ceae2de027d

October 18, 2022

Score: 9 MALWARE FAMILY: persistenceTAGS:persistence, ransomware, spyware, stealerMD5: 6a1836250717296a9b354ceae2de027dSHA1: a122153c35e32e8572fb3f3716a4991061b444baANALYSIS DATE: 2022-10-18T14:20:22ZTTPS: T1107, T1490, T1091, T1060, T1112, T1005, T1081, T1082...

Malware Analysis – djvu – bc624005cdc1d074e56c20c61e7cb0c0

October 18, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, botnet:517, backdoor, collection, discovery, persistence, ransomware, spyware, stealer, trojan, vmprotectMD5: bc624005cdc1d074e56c20c61e7cb0c0SHA1: 7eb357cfe07d55f7efdc830fc2e668dde3efcac0ANALYSIS DATE:...

Malware Analysis – octo – 759aada69cde33ef7f7e4495128ef9c1

October 18, 2022

Score: 10 MALWARE FAMILY: octoTAGS:family:octo, banker, evasion, infostealer, ransomware, rat, trojanMD5: 759aada69cde33ef7f7e4495128ef9c1SHA1: bc83eee2010bf0fda628f65c5517c3399ea3637aANALYSIS DATE: 2022-10-18T14:31:21ZTTPS: ScoreMeaningExample10Known badA malware family was...

Malware Analysis – djvu – f1a5ae71672127933daeb504d047a740

October 18, 2022

Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:vidar, botnet:517, discovery, persistence, ransomware, spyware, stealerMD5: f1a5ae71672127933daeb504d047a740SHA1: 961ff8987db7a695e9cf270ddf94e97252c0f21dANALYSIS DATE: 2022-10-18T14:34:43ZTTPS: T1005, T1081, T1222, T1082,...

Malware Analysis – ransomware – 0af83913c32ea2e3686ed97782aad007

October 18, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 0af83913c32ea2e3686ed97782aad007SHA1: 62fc4d8ef31e4a58a80911b513c124b535bd5cbcANALYSIS DATE: 2022-10-18T14:40:17ZTTPS: T1005, T1081, T1082, T1107, T1490, T1091 ScoreMeaningExample10Known badA malware...

Malware Analysis – ransomware – 83add3a38b3aa8f30866cb31457324a8

October 18, 2022

Score: 9 MALWARE FAMILY: ransomwareTAGS:ransomware, spyware, stealerMD5: 83add3a38b3aa8f30866cb31457324a8SHA1: ca2466ece9c6ae6dc51e7130ba4c4252aec7b586ANALYSIS DATE: 2022-10-18T14:40:25ZTTPS: T1107, T1490, T1091, T1005, T1081, T1082 ScoreMeaningExample10Known badA malware...

Malware Analysis

Malware Analysis – evasion – c2785bd19266c528af475aa0643f01ce

Malware Analysis – ransomware – bf26f02752e2eec7e9630ef53ed3543d

Malware Analysis – bootkit – c4f6b7208dd86c37e3e914e1355ee128

Malware Analysis – ransomware – 1e3e08ed56fc7913137cfc1b95b68cb6

Malware Analysis – djvu – 49d0997396c539711ae1efd04ca5902c

Malware Analysis – ransomware – e625462dcf0586d7afda19827cb271ca

Malware Analysis – ransomware – 9dcaa6c847abc868a2d6dead91dd6319

Malware Analysis – ransomware – 6d61871e22b3872ad2ac7d21e3a56299

Malware Analysis – ransomware – 5e65904195205ca9bedca1ed62c18f0c

Malware Analysis – ransomware – e8761eb93c7e5989e50da329c4f38aed

Malware Analysis – ransomware – e0a1dea78f5ef86ec2d274e7e9bcb5c7

Malware Analysis – wannacry – 8053c8e9171fa8fa75061b6639531671

Malware Analysis – djvu – 816added67b8695ce1d08dc8d64224f9

Malware Analysis – djvu – adef9b3445ea954ca3ec8a1f61daef01

Malware Analysis – ransomware – deba4c78231b0c065ff368ad213a1d4c

Malware Analysis – persistence – f558d2ee7175b0ace3d68b9363a22f94

Malware Analysis – evasion – a9692ba095ce225bfac0bb72c8617cab

Malware Analysis – persistence – f5e72bf445387eddec000e0238adf873

Malware Analysis – persistence – 6a1836250717296a9b354ceae2de027d

Malware Analysis – djvu – bc624005cdc1d074e56c20c61e7cb0c0

Malware Analysis – octo – 759aada69cde33ef7f7e4495128ef9c1

Malware Analysis – djvu – f1a5ae71672127933daeb504d047a740

Malware Analysis – ransomware – 0af83913c32ea2e3686ed97782aad007

Malware Analysis – ransomware – 83add3a38b3aa8f30866cb31457324a8

[CLOP] – Ransomware Victim: WOODPLC[.]COM

[CLOP] – Ransomware Victim: WASHINGTONPOST[.]COM

[CLOP] – Ransomware Victim: TRIMBLE[.]COM

[CLOP] – Ransomware Victim: INTERNATIONAL[.]COM

[CLOP] – Ransomware Victim: LOGITECH[.]COM

You may have missed